WSA - SSH Vulnerability Patch -

[mplaksin0]

Hello,

We are trying to install the patch cisco-sa-20150625-ironport on our WSA's. When we do the instalation, the WSA restart normally, but the patch still showing in the available updates.

Is this normal. Someone else is having this problem?.

[Robert Sherwin · Accepted solution]

This is normal operation.  

Post completion - you will see this listed in the upgrades manifest output - once it has been applied one-time, please ignore for future installation.  If it is selected again, output shows it has already been completed:

wsa100v.local> upgrade

Upgrades available.
1. cisco-sa-20150625-ironport SSH Keys Vulnerability Fix
[1]> 1

Would you like to save the current configuration to the configuration directory before upgrading? [Y]> n

Would you like to email the current configuration before upgrading? [N]> n

Performing an upgrade may require a reboot of the system after the upgrade is applied. You may log in again after this is done. Do you wish to proceed with the upgrade? [Y]> y

Checking if 'Cisco-Ironport SSH Keys Vulnerability' patch is required
'Cisco-Ironport SSH Keys Vulnerability' patch is already applied
Upgrade installation finished.

-Robert

[mplaksin0]

Its strange because with other updates, do not happend.